$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/13a4740b-6674-3dae-8c19-cdfd41f4fc1c.roa File: 13a4740b-6674-3dae-8c19-cdfd41f4fc1c.roa (raw, json) Hash identifier: gKWfNLfSpG0ciUbv+mJi0eTm85rheaaI9+JJf0ty+No= Subject key identifier: 28:C9:83:10:D3:AC:49:44:B8:53:D8:ED:29:88:92:8E:ED:2E:3E:02 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AB4EC648FB8DD6DA56C2FABF0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/13a4740b-6674-3dae-8c19-cdfd41f4fc1c.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 7029 IP address blocks: 40.132.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ec:64:8f:b8:dd:6d:a5:6c:2f:ab:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=dd843c7e-ebcb-49d1-87f6-837163ade779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:bc:4a:9b:c4:88:bd:bc:90:b1:66:d4:1b:47: d0:75:b8:e3:b5:86:e4:a7:99:a4:47:f9:b0:bb:e8: e1:4a:36:c6:1e:9b:3d:7a:83:aa:56:04:5e:79:a7: c5:dc:39:96:5e:34:a9:09:f7:76:53:d5:4d:bc:54: ab:5e:cc:a8:06:45:99:e6:51:a3:f5:47:a4:68:c7: b9:08:bc:21:1e:d6:84:90:f2:69:3b:9f:93:b0:06: d4:8f:c8:ab:3d:bb:14:73:65:3d:ee:8e:13:a5:78: 16:2e:11:60:f5:ea:c0:2a:3f:07:c0:55:a6:79:60: d1:d1:e8:a5:0b:d5:68:b1:8f:57:9b:bc:8c:77:2b: 49:8d:1e:50:43:4c:54:fa:f9:c2:b7:e5:58:fc:eb: 37:7a:2d:1e:5c:c2:6c:7d:29:77:09:15:99:c6:59: c2:0c:d9:cd:d7:6d:b0:1b:67:6b:e1:c0:30:96:db: ed:07:4f:49:d8:d2:9b:df:3a:6d:2f:34:5e:29:f2: 3e:da:e3:1b:e9:79:30:5f:9a:35:24:49:79:aa:88: 15:a2:f7:53:7a:69:19:f7:9f:97:6a:a5:93:9e:b5: 02:bb:be:0f:98:93:f3:19:39:b1:08:49:30:a6:53: 55:87:85:6d:f6:b8:4e:7a:11:1b:1f:71:d1:95:04: ef:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:C9:83:10:D3:AC:49:44:B8:53:D8:ED:29:88:92:8E:ED:2E:3E:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/13a4740b-6674-3dae-8c19-cdfd41f4fc1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.132.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:8f:87:7a:d8:bd:13:6a:93:7a:c8:cd:09:05:cb:6b:9f:19: 1f:6d:4b:ed:1e:12:be:3b:e8:4c:3a:57:f5:07:20:3f:a8:76: 83:0d:9b:7d:a0:9d:0c:bb:69:45:b1:06:04:eb:f3:b0:27:22: 88:52:c7:af:08:0c:bf:01:20:8b:14:83:47:1f:b9:73:b9:e5: 81:45:e6:89:20:db:2c:f5:7a:e4:e8:10:a4:a0:14:12:7b:9c: 01:7a:ae:07:b5:02:d5:c9:3f:c3:a1:6a:9e:d1:dc:cd:99:4f: fa:f4:04:cd:c3:2a:2f:81:85:f6:bd:e7:ba:62:07:e5:a5:f3: 20:53:c2:5d:16:3e:35:a3:ce:e3:58:22:1f:93:c6:92:42:06: 7c:2d:e6:8b:ba:06:c7:92:0c:d1:3d:83:ab:a8:01:4a:f8:4a: 34:11:ef:71:17:90:cf:bb:dd:1a:23:88:c8:c2:e6:32:c0:f5: 5b:2c:53:99:2f:8f:58:b2:e8:14:04:18:20:09:c0:e1:e6:a0: a8:37:0a:82:40:5f:c2:8d:17:48:ad:97:c3:fa:78:af:66:4c: e4:68:81:7d:d6:a5:05:6f:5e:cc:a0:e9:1d:58:43:06:ae:44: 04:a9:a1:95:4e:a1:7c:da:fb:a4:78:5e:5e:eb:54:eb:2a:5f: bd:f8:52:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07GSPuN1tpWwvq/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk ZGQ4NDNjN2UtZWJjYi00OWQxLTg3ZjYtODM3MTYzYWRlNzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprxKm8SIvbyQsWbUG0fQdbjjtYbkp5mkR/mw u+jhSjbGHps9eoOqVgReeafF3DmWXjSpCfd2U9VNvFSrXsyoBkWZ5lGj9UekaMe5 CLwhHtaEkPJpO5+TsAbUj8irPbsUc2U97o4TpXgWLhFg9erAKj8HwFWmeWDR0eil C9VosY9Xm7yMdytJjR5QQ0xU+vnCt+VY/Os3ei0eXMJsfSl3CRWZxlnCDNnN122w G2dr4cAwltvtB09J2NKb3zptLzReKfI+2uMb6XkwX5o1JEl5qogVovdTemkZ95+X aqWTnrUCu74PmJPzGTmxCEkwplNVh4Vt9rhOehEbH3HRlQTvCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCjJgxDTrElEuFPY7SmIko7tLj4CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTNhNDc0MGItNjY3NC0z ZGFlLThjMTktY2RmZDQxZjRmYzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCKISoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmPh3rYvRNqk3rIzQkFy2ufGR9tS+0eEr476Ew6V/UHID+odoMNm32g nQy7aUWxBgTr87AnIohSx68IDL8BIIsUg0cfuXO55YFF5okg2yz1euToEKSgFBJ7 nAF6rge1AtXJP8Ohap7R3M2ZT/r0BM3DKi+Bhfa957piB+Wl8yBTwl0WPjWjzuNY Ih+TxpJCBnwt5ou6BseSDNE9g6uoAUr4SjQR73EXkM+73RojiMjC5jLA9VssU5kv j1iy6BQEGCAJwOHmoKg3CoJAX8KNF0itl8P6eK9mTORogX3WpQVvXsyg6R1YQwau RASpoZVOoXza+6R4Xl7rVOsqX734Uto= -----END CERTIFICATE-----Generated at Mon Aug 4 19:08:31 2025 by rpki-client